wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 5 Packages Projects Releases Wiki Activity

docs(logbook): update ansible check-mode production counts [skip ci]

Browse Source
This commit is contained in:
Your Name
2026-05-31 14:47:07 +08:00
parent a3479b3254
commit 42fd9827f5
1 changed files with 9 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
docs/LOGBOOK.md
View File

@@ -45,8 +45,14 @@ truth-chain summary:
DB / worker evidence:
ansible_candidate_matched dry_run=166
ansible_check_mode_executed failed=8
latest 2 rows:
ansible_check_mode_executed success=1, failed=9
truth-chain execution_backend_summary:
ansible_check_mode_total=10
ansible_apply_total=0
ansible_pending_check_mode_total=2
latest rows:
INC-20260530-B4A7BD -> ssh_mcp, ansible:110-devops, check_mode_executed=true, apply_executed=false, rc=0
INC-20260530-0DD83C -> ssh_mcp, ansible:188-ai-web, check_mode_executed=true, apply_executed=false, rc=2
INC-20260530-0E5C5C -> ssh_mcp, ansible:188-ai-web, check_mode_executed=true, apply_executed=false, rc=2
INC-20260530-B37FB4 -> ssh_mcp, ansible:188-ai-web, check_mode_executed=true, apply_executed=false, rc=2
failure reason:
@@ -56,7 +62,7 @@ DB / worker evidence:
**判讀 / 下一步**：
- 這不是 auto-repair 完成；apply 仍鎖住，`ansible_apply_total=0`，production full auto-repair claim 仍為 false。
- 已完成的是「AwoooP 能把 AI 候選修復接到 Ansible check-mode 並寫入 DB 證據」；下一個真 blocker 是 188 的受控 sudo / become 策略。
- 已完成的是「AwoooP 能把 AI 候選修復接到 Ansible check-mode 並寫入 DB 證據」；110 已有成功 check-mode，下一個真 blocker 是 188 的受控 sudo / become 策略。
- 不建議直接給 `ollama` 無限制 NOPASSWD；下一步應二選一：
- 建立專用 Ansible check-mode 帳號與最小 sudoers，只允許 catalog 需要的 read/check 操作。
- 或拆出 188 read-only check-mode playbook，無 sudo 先覆蓋 Docker / app 層觀測，root-owned drift 仍轉人工審批。